critical10.0Public exploit code
CVE-2004-0648
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla 1.7 - External Protocol Handler2004-07-08 · remote · windows · Verified
Impact
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | through 0.9.2 |
| Mozilla | Mozilla | through 1.7.1 |
| Mozilla | Thunderbird | through 0.7.2 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html
- http://marc.info/?l=bugtraq&m=108938712815719&w=2
- http://secunia.com/advisories/12027
- http://www.ciac.org/ciac/bulletins/o-175.shtml
- http://www.kb.cert.org/vuls/id/927014
- http://www.mozilla.org/projects/security/known-vulnerabilities.html
- http://www.mozilla.org/security/shell.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16655
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html
- http://marc.info/?l=bugtraq&m=108938712815719&w=2
- http://secunia.com/advisories/12027
- http://www.ciac.org/ciac/bulletins/o-175.shtml
- http://www.kb.cert.org/vuls/id/927014
- http://www.mozilla.org/projects/security/known-vulnerabilities.html
- http://www.mozilla.org/security/shell.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16655